Personal Information Collection and Use Consent

(Required) Consent to Collection and Use of Personal Information

OneTherapy Co., Ltd. (the “Company”) collects and uses personal information as described below to provide the AI saju and fortune conversation service, Sajuping. Please read the following carefully before providing your consent.

Article 1 (Personal Information Collected and Collection Methods)

The Company collects the following personal information for smooth customer support, provision of AI saju/fortune services, and service quality improvement.

1. [Required] When signing up for membership and using the service
   • Collected items: registered name, nickname (including preferred form of address), gender, date of birth (including solar/lunar calendar status), city of birth, time of birth
   • Device and automatically collected items: phone number, email, device information (including model name, mobile carrier, OS, device identifiers, time information, etc.), and application information (version, etc.). An advertising ID may be processed when ads are served, depending on operating system settings and advertising choices, as explained separately in Article 9 below.
   • When using social login: linked account information (identifiers and other information provided by Kakao, Naver, Google, Apple, or the applicable service for social login functionality)
   • Service usage records: exchanged messages and consultation information (including message transmission time, saju/fortune questions and AI responses, emojis, stickers, images, videos, audio, and other multimedia materials), user reaction information, status information shown to others, access IP, and improper usage records
2. [Required] When using paid services
   • Collected items: payment method information (information provided by the payment processor, such as partial credit card number and bank account information), payment and transaction records

Article 2 (Purpose of Use of Personal Information)

The Company uses collected personal information for the following purposes.

1. Service provision and contract performance: provision of AI saju and fortune conversation services, provision of content (premium interpretations and reports), paid payment processing and settlement (including Ping top-ups), and provision of customized results
2. AI algorithm and service improvement: machine learning and algorithm enhancement for AI conversation/interpretation models, development of new services and content, statistical analysis, and service quality improvement
3. Member management: identity verification for membership services, prevention of improper use by bad actors and unauthorized use, confirmation of sign-up intent, restriction of registration by children under 14, record retention for customer support and dispute resolution, and delivery of notices

Article 3 (Retention and Use Period of Personal Information)

In principle, the Company destroys personal information without delay after the purpose of collection and use is achieved (for example, upon membership withdrawal). However, where retention is required under applicable laws, the Company retains member information for the periods prescribed by those laws as follows.

1. Records concerning contracts or withdrawal of offers: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.)
2. Records concerning payment and supply of goods, etc.: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.)
3. Records concerning consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce, etc.)
4. Service access and usage records: 3 months (Protection of Communications Secrets Act)

Article 4 (Processing of Pseudonymized Information and AI Training)

1. The Company may pseudonymize and use collected personal information (including saju information and conversation history) so that specific individuals cannot be identified, for the purpose of improving the quality of the AI Sajuping service, preparing statistics, and conducting scientific research (including AI algorithm enhancement).
2. Processed pseudonymized information is stored and managed safely through physical and technical measures, separated from additional information so that restoration is not possible, and retained until membership withdrawal.

Article 5 (Entrustment of Personal Information Processing)

The Company entrusts certain tasks to external providers as described below for smooth service provision, and specifies necessary matters in entrustment agreements so that personal information is managed safely in accordance with applicable laws.

Only the information necessary to provide the relevant feature (conversation content, saju information, and information entered or attached by the user) is sent to AI service processing providers. The Company has contracts and settings in place so that these providers do not use the transmitted information to train AI models, and the transmitted information is deleted after processing is complete, either immediately or within a limited period according to each provider’s policy.

Article 6 (Overseas Transfer of Personal Information)

The Company transfers personal information overseas (for entrusted processing and storage) as described below to provide services and store data using global cloud servers and overseas AI services. Transferred data is sent over encrypted connections at the time the service is used.

Only information necessary for each provider’s service is transferred. Article 9 separately describes the processing and overseas transfer of information by Google and advertising partners when ads are served. Users may refuse the overseas transfer through the procedure in Article 7 or by contacting the Personal Information Protection Officer listed in Article 10; however, refusing the transfer of personal information necessary to provide core services may restrict use of the service.

Article 7 (Rights of Users and Legal Representatives and How to Exercise Them)

1. Users may view or modify their registered personal information at any time and may request termination of membership (membership withdrawal).
2. Users may directly withdraw by selecting “Settings > Delete Account” in the app.
3. The Company does not allow children under 14 to directly register for or use the service. However, if an adult member (legal representative) directly enters a child’s date of birth or other information for the purpose of analyzing the child’s saju, such information is treated as information provided with the consent of the legal representative and will not be used for purposes other than service provision.

Article 8 (Right to Refuse Consent and Disadvantages)

You have the right to refuse consent to this collection and use of personal information. However, this consent is required to provide the Sajuping service, so membership registration and service use may be restricted if you refuse consent.

Article 9 (Google AdMob Banner Ads and Advertising Data)

1. The Company may show Google AdMob banner ads while a chat response is pending and at the top of the profile and saju chart screens. When an ad is requested, displayed, or clicked, Google LLC and participating ad partners may process the IP address (which can be used to estimate general location), app and device information and identifiers (including an advertising ID where available), ad impressions and interactions, and diagnostic and performance data. This information may be used to serve ads, manage frequency, measure effectiveness, conduct analytics, and prevent fraud. See how Google uses information from apps that use its services.
2. At sign-up and terms acceptance, the Company asks users to make a separate, optional choice about the use of information for personalized ads and ad effectiveness measurement. Declining this choice does not prevent use of the app’s core features. Depending on location and consent choices, personalized, non-personalized, or limited ads may be served, or no ad may be shown. Non-personalized ads may still use identifiers for frequency capping and aggregated reporting. Users can change their advertising choice in the app under Settings > Terms and Consents. Where Google’s ad privacy options screen is available, users can reopen it from the app’s settings to change those choices.
3. On iOS, the app may separately request App Tracking Transparency (ATT) permission. If permission is denied, the iOS advertising identifier (IDFA) is not sent in Google’s ad requests. ATT permission can be changed under iOS Settings > Privacy & Security > Tracking. On Android, users can reset or delete their advertising ID in device settings. Operating system permission and the in-app advertising choice are separate controls.
4. To serve ads, the information in paragraph 1 may be transmitted from the app over the network to Google LLC (United States) and participating ad partners, and may be processed abroad in locations where Google operates its global infrastructure or those partners operate. Where a Google advertising consent screen is provided, it identifies participating partners and their processing purposes. Retention periods depend on Google’s and each partner’s policies and the user’s choices. For details, see Google’s Privacy Policy and each partner’s policy linked from the advertising consent screen.

Article 10 (Personal Information Protection Officer)

The person responsible for overseeing or handling personal information protection matters is as follows.

• Name: Yoonseop Lee
• Email: yoon@sajuping.ai

For personal information protection inquiries, you may contact the email address above or cs@sajuping.ai.

Addendum

This Privacy Policy applies from October 15, 2026. The previous Privacy Policy (effective May 11, 2026) is available here.